JUN- 17-2009 19:29 HDP 703 668 8200 P. 003 

RECEIVED 

CBFfTRAL FAX CENTER 

Attorney Docket No: 32860-000:/!i{'/Ti^ 2009 
Application No, l0/785a80 

Page 2 

AMENDMENTS TO TF ^ ri^ATMS 

The foUowing is a. complete, marked up listing of revised claims with a 
status identifier in parentheses, underlined text indicating insertions, and 
strikethrough and/or double-bracketed text indicating deletions. 



LISTING OP CLAIMS; 

1 . (Currently Amended) An electronic data processing method method 
comprising: 

' performin g^ bv a security check device, a security check to 

ascertain a user identity by comparing entered identity information with 
stored user identity data; 

associating the user identity with a user identifie r stored in a first 
data store : 

associating the user identifier with at least one user group 
identifier stored in a second data store : 

selecting a user group identifier and acquiring at least one data 
key associated therewith from a centralized third data store including all 
available keys, wherein the a t least one user group identifier and ttie_at 
least one data key arg b e ing associated with one another; and 
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perfQrmln g,J)y at least one processor, at least one of enciypting 
and decrypting data using the acquired at least one data key and 
inhibiting user recognition of the acquired at least one data k^- 

2, (Previously Presented) The method as claimed in claim 1, wherein the 
security check involves at least one of checking a user-specific biometric 
data« an electronic key and a mechanical key, 

3. - 4. (Canceled) 

5, (Withdrawn) The system as claimed in claim 8. wherein the data key is 
accessible using a data telecommunication device. 



(Previously Presented) The method as claimed In claim 1, wherein a 
plurality of data keys are simultaneously assignable to one user 
identifier. 

(Previously Presented) The method as claimed in claim 1. wherein the 
data are medically relevant, wherein the users include personnel within a 
medical facility, and wherein common user group identifiers are assigned 
the same data key. 
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3, (Withdrawn) An electronic data processing system comprising: 

a security check device to ascertain user identity a first data store 

for storage and retrieval of at least one user identifier and associated 

user identity data; 

a second data store for storage and retrieval of the at least one 

user identifier and associated at least one user group identifier: 
a centralized third data store for storage and retrieval of all 

available data keys, the centralized third data store including at least one 

associated user group identifier matched with at least one associated 

data key; and 

at least one processor to ascertain a user identifier by comparing 
data between the security check device and the first data store, to 
ascertain at least one user group from the second data store, to ascertain 
at least one data key for at least one user group from the third data 
store, and for performing at least one of data encryption and decryption 
using the at least one data key. 

9, (Withdrawn) The electronic data processing system as claimed in claim 8, 
wherein the security check device reads blometric data fi*om the user. 
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10. (Withdrawn) The electronic data processing system as claimed in claim 8, 
wherein the security check device is a user-specific at least one of 
electronic and mechanical key. 

11. (Canceled). 

12. (Withdrawn) The electronic data processing system as claimed in claim 8, 
wherein the system uses a data telecommunication device to access the 
third data store. 



13. CWithdravm) The electronic data processing ^tem as claimed in claim 8, 
wherein the system is a medical workstation for handling medically 
relevant data- 



14. (Previously Presented) A computer-readable storage medium including 

computer executable Instructions that, when executed, cause a computer 
to cany out the method as claimed in claim 1 . 



15. - 21. (Canceled). 
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22. (Currently Amended) A method for a.t least one of encryption and 
decryption of data, comprising: 

performin g, bv a security check device, a security check to 
ascertain an Identity of a user bv comparing entered identity in formation 
with stored user identity data: 

associating the user identity with a user identifier stored in a first 
data store: 

associating the user identifier^w ith a user group including a 
plurality of users such that a data key for at least one of encrypting and 
decrypting data is assigned to the user based on the group with which 
the user identifier I s associated, the same data key being assignable to 
the plurality of users; and 

at least one of encrypting or decrypting dat a, bv at least one 
processor^ using the assigned data key, 

23. (Previously Presented) A computer-readable storage medium including 
computer executable Instructions that, when executed, cause a computer 
to, cany out the method as claimed in claim 22. 

24. (Original) The method as claimed in claim 22, wherein the security check 
involves checking biomctric data of the user. 
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25. (Original) The method as claimed In claim 22, wherein the security check 
involves checking a user-specific at least one of electronic and 
mechanical key. 

26. (Original) The method as claimed in claim 22, wherein the data key is 
ascertained by comparing the data obtained in the security check with 
content of a data key memory. 



27, (Original) The method as claimed in claim 26, wherein the data obtained 
in the security check are compared with the content of the data key 
memory using a data telecommunication device* 



28. (Original) The method as claimed in claim 22, wherein a plurality of data 
keys are simultaneously assignable to one user, 

29- (Original) The method as claimed In claim 22, wherein the data are 
medically relevant, wherein the users include persormel at a medical 
facility, and wherein common user groups are assigned the same data 
key. 
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30, (Original) The method of claim 22, wherein users associated with a 
common user group are assigned the same data key. 



31 . (Currently Amended) An electronic data processing facility for at least 
. one of encryption and decryption of data, comprising; 

means for performing a security check to ascertain an identity of a 
user bv comparing entered identity information with stored user identity 
data ; 

means for associating the user identity with a user identifier stored 
in a iirst data store; 

means for associating the user identifier w ith a user group 
including a plurality of users a data key is assigned to the user based on 
the group with which the user identifier i s associated, the same data key 
being assignable to the plurality of users, and the data key being for at 
least one of encrypting and decrypting data; and 

means for enciypting or decrypting data using the assigned data 

key, 

32. (Previously Presented) The method of claim 1 , wherein a user identifier 
associated with a common user group identifier is assigned the same 
data key. 
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33. (Withdrawn - Cxirrently Amended) The system of claim 8, fiirther 
comprising: 

llAll a fourth data store for storage and retrieval of encrypted data- 

34. (Withdrawn) The system of claim 8, wherein at least one of the first data 
store, the second data store and the fourth data store are combined. 

35. (Withdrawn) The system of claim 8, wherein the data store comprises: 
mechanical memory^ electronic memory, and magnetic and optical media 

data storage. 

36- (Withdrawn) The system of claim 8, wherein the third data store is 
isolated from the first, second and fourth data stores. 

37. (Withdrawn) The system of claim 8. wherein data entry and retrieval is 
at least one of manual and automated. 

38. (Withdrawn) The system of claim 12, wherein the data 
telecommunications device is removably and operatlvely associated with a 
computer network for transfer of data. 
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39- (Withdrawn) The system of claim 8, wherein the chamiel comprises an 
access and restriction process. 

40- (Withdrawn) Hie system of claim 39, wherein the channel access and 
restriction process functions operatively with the secxirity check device. 
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